tasks/upgrade-servers: upgrade Keycloak box first

matrix.archlinux.org doesn't like it when accounts.archlinux.org is unavailable at start-up. Try to work around this by upgrading accounts.archlinux.org first and doing a health check before proceeding to update the rest of the servers.

Fixes: #496 (closed)